Vulnerability Intelligence Report
CVE-2013-3614
Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a brute-force attack.
No Active Exploit Signals
CVSS Base Score
9.3
HIGH
EPSS Probability:7.04%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| dahuasecurity | dvr0404hd-a | all |
| dahuasecurity | dvr0404hd-l | all |
| dahuasecurity | dvr0404hd-s | all |
| dahuasecurity | dvr0404hd-u | all |
| dahuasecurity | dvr0404hf-a-e | all |
| dahuasecurity | dvr0404hf-al-e | all |
| dahuasecurity | dvr0404hf-s-e | all |
| dahuasecurity | dvr0404hf-u-e | all |
| dahuasecurity | dvr0804 | all |
| dahuasecurity | dvr0804hd-l | all |
| dahuasecurity | dvr0804hd-s | all |
| dahuasecurity | dvr0804hf-a-e | all |
| dahuasecurity | dvr0804hf-al-e | all |
| dahuasecurity | dvr0804hf-l-e | all |
| dahuasecurity | dvr0804hf-s-e | all |
| dahuasecurity | dvr0804hf-u-e | all |
| dahuasecurity | dvr1604hd-l | all |
| dahuasecurity | dvr1604hd-s | all |
| dahuasecurity | dvr1604hf-a-e | all |
| dahuasecurity | dvr1604hf-al-e | all |
| dahuasecurity | dvr1604hf-l-e | all |
| dahuasecurity | dvr1604hf-s-e | all |
| dahuasecurity | dvr1604hf-u-e | all |
| dahuasecurity | dvr2104c | all |
| dahuasecurity | dvr2104h | all |
| dahuasecurity | dvr2104hc | all |
| dahuasecurity | dvr2104he | all |
| dahuasecurity | dvr2108c | all |
| dahuasecurity | dvr2108h | all |
| dahuasecurity | dvr2108hc | all |
| dahuasecurity | dvr2108he | all |
| dahuasecurity | dvr2116c | all |
| dahuasecurity | dvr2116h | all |
| dahuasecurity | dvr2116hc | all |
| dahuasecurity | dvr2116he | all |
| dahuasecurity | dvr2404hf-s | all |
| dahuasecurity | dvr2404lf-al | all |
| dahuasecurity | dvr2404lf-s | all |
| dahuasecurity | dvr3204hf-s | all |
| dahuasecurity | dvr3204lf-al | all |
| dahuasecurity | dvr3204lf-s | all |
| dahuasecurity | dvr3224l | all |
| dahuasecurity | dvr3232l | all |
| dahuasecurity | dvr5104c | all |
| dahuasecurity | dvr5104h | all |
| dahuasecurity | dvr5104he | all |
| dahuasecurity | dvr5108c | all |
| dahuasecurity | dvr5108h | all |
| dahuasecurity | dvr5108he | all |
| dahuasecurity | dvr5116c | all |
| dahuasecurity | dvr5116h | all |
| dahuasecurity | dvr5116he | all |
| dahuasecurity | dvr5204a | all |
| dahuasecurity | dvr5204l | all |
| dahuasecurity | dvr5208a | all |
| dahuasecurity | dvr5208l | all |
| dahuasecurity | dvr5216a | all |
| dahuasecurity | dvr5216l | all |
| dahuasecurity | dvr5404 | all |
| dahuasecurity | dvr5408 | all |
| dahuasecurity | dvr5416 | all |
| dahuasecurity | dvr5804 | all |
| dahuasecurity | dvr5808 | all |
| dahuasecurity | dvr5816 | all |
| dahuasecurity | dvr6404lf-s | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
7.040%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | CERT/CC · CERT · USA |
| Reserved | 2013-05-21T00:00:00 |
| Published | 2013-09-17T10:00:00 |
| Last Updated | 2024-09-17T03:02:59 |
Community Chatter & Buzz